There is a widespread problem of cookie banners not being compliant with the General Data Protection Regulation (GDPR), which negatively impacts user experience and violates personal data rights. To mitigate this issue, strides need to be made in violation detection to assist developers, designers, lawyers, organizations, and authorities in designing and enforcing GDPR-compliant cookie banners. In this thesis, we present a novel method and an open-source tool for automatically analyzing the GDPR compliance of cookie banners. The tool uniquely leverages large language models together with static code analysis to locate and analyze any cookie banner, using only the website address as input. Informed by the Design Science Research methodology, our research process involved interviews with GDPR legal experts and a thorough review of current literature in order to understand the problem context and define the objectives for our solution. After an initial version of the tool was created, an evaluation was performed by a GDPR legal expert. The feedback revealed that even at this early development stage, the tool approaches the capabilities of a trained eye, which illustrates its potential. Furthermore, our proposed method is generalizable and can be used under many domains to solve various problems (e.g., more generalized web scraping). However, further development and testing with the help of legal experts is required to enhance the tool's accuracy and validity.

Screening programs for cervical cancer are performed to diagnose the early stage of cancer and prevent its development. Historically, the screening test was taken every three years, but it gradually varied due to continuous changes in technology, guidelines, and a new type of test. These changes made the screening participants uncertain and worried about understanding and interpreting the meaning of various test results and frequent follow-ups. These test results are manual and time-consuming to date. The participants seek it as digital, allowing easy and fast access to information. The primary research challenge of the proposed study is to present simple and complex test history data to the participants in an easily understandable way. The proposed research helped to design an artifact (prototype) that can be utilized to develop a digital service that does not cause any uncertain worry for the participants in understanding the complex test history data. For this, the proposed thesis study used state-of-the-art visualization techniques following the guidelines of design science research.

Zero-days are vulnerabilities that the software vendor does not know about and thus cannot provide a patch for. Their value has caused markets to develop, divided by the purchase intention. This thesis focuses on the white and grey markets, that is those buying to patch and those buying to exploit. While states generally have an interest in both, they currently spend money to exploit zerodays, keeping software insecure. The lack of knowledge and awareness surrounding this practice is the problem targeted in this thesis. Serious games, aiming to be both entertaining and educational, represent one opportunity to create awareness. They fit our circumstances particularly well because understanding the problem space requires adversarial thinking and lots of different concepts. Our research goal has thus been to create a serious game that accurately illuminates the dilemma experienced by states. Design science was the research strategy employed to reach the stated goal. Our main contribution is Minimator, a multiplayer, web-based game in which players, acting as states, have to protect their infrastructure and deal with zero-day markets. Additionally, we present a formal model of states’ treatment of zero-day markets developed using game theory and shown to resemble the n-players prisoners’ dilemma. An expert evaluation was conducted, delivering promising results in terms of gameplay appeal, and accuracy. A naturalistic evaluation remains, but is suggested in detail for future endeavours. Minimator is original as, to our knowledge, no similar artefact exists. It provides value by potentially creating a starting point for and encouraging an informed, public debate about the trade-off between national and infrastructure security, which is inherently political.

Nowadays, the business world is characterized by complexity since market and customer requirements are changing rapidly. Based on this assumption, providers are facing the challenge of delivering software products in shorter terms while these products remain innovative. Agile software development has a huge impact on how software is developed worldwide and promises business value in short iterations. At the same time, requirements are the base of all software products, and consequently, Requirements Engineering (RE) plays one of the most important roles in system development. Traditional techniques referring to intended data do not cover the constantly increasing demands of RE and unintended data from digital sources has amplified the need for Data-Driven Requirements Engineering (DDRE). This study contributes to Computer and System Science by providing a process to combine DDRE and traditional RE approaches in Agile software development methodologies. In this study, the researcher is trying to provide a concrete solution to the lack of an effective process to address data-driven requirements in a Scrum environment organized by regular Sprints and the purpose of it is to suggest a new method for requirements elicitation based on digital data and combine them with traditional stakeholder-driven RE in a Scrum agile environment. The method intends to assist Agile professionals to elicit requirements from digital sources in combination with intended data derived from the stakeholders without impacting the main Agile practices. The approach to conduct this study is Design Science Research (DSR) and contains five steps: Explicate Problem, Define Requirements, Design and develop Artefact, Demonstrate Artefact, and Evaluate Artefact. Literature review has been conducted to explicate the research problem and define the requirements of the artefact. Then, a process and a collaboration board have been created based on the requirements to bring DDRE and traditional RE into the Scrum environment. The researcher performed a demonstration of two illustrative cases of the usage of the proposed artefact to three Scrum professionals and three semi-structured interviews were conducted to evaluate the artefact. After the evaluation, the researcher refined and presented the final artefact that will help the public and private organizations to reduce the costs and time plan on eliciting requirements, and to increase the customers’ satisfaction. The artefact has not been applied in a real Agile environment, but Requirement Engineers and Agile team members can build on the proposed method and bring the elicitation approach of DDRE closer to the software development process.

No description available.

[ES] La crisis económica iniciada en España en el año 2007 produjo una importante reducción de la demanda que afectó seriamente a las empresas consultoras de ingeniería españolas. Muchas de ellas optaron por iniciar un proceso de internacionalización que asegurara su continuidad, decisión que adoptaron de forma urgente y sin el tiempo necesario para adquirir conocimiento del mercado exterior y de los riesgos que conlleva la actividad internacional. Esta situación se vio agravada en el caso de las Pymes, que por su naturaleza disponen de menos recursos y capacidades para afrontar una internacionalización con garantías. Con el diseño de un modelo de madurez de internacionalización este trabajo de investigación pretende ofrecer una guía a las empresas consultoras de ingeniería que van a iniciar o han iniciado un proceso de internacionalización. El diseño del modelo está basado en: (1) el conocimiento teórico de las variables que afectan al éxito internacional en el sector de la construcción, validadas mediante entrevistas a diez empresas consultoras de ingeniería internacionalizadas; (2) los aspectos que intervienen en la expansión internacional de las empresas; y (3) los modelos de madurez más relevantes. El diseño del modelo se realiza siguiendo la propuesta del Design Science Research (DSR), en el que se somete a iteraciones de diseño y validación que incrementan su aplicabilidad. En estas iteraciones se aplican diferentes técnicas de investigación: grupo focal, prueba piloto y estudios de caso múltiple; mediante estos estudios de caso se aplica el modelo a ocho empresas consultoras de ingeniería. Estas implementaciones han permitido identificar las fortalezas y debilidades de las empresas, su nivel de madurez de internacionalización y la influencia del tamaño y experiencia internacional de las empresas en su nivel de madurez y en el valor de los índices de internacionalización. / [CA] La crisi econòmica iniciada a Espanya l'any 2007 va produir una important reducció de la demanda que va afectar seriosament les empreses consultores d'enginyeria espanyoles. Moltes d'elles van optar per iniciar un procés d'internacionalització que assegurara la seua continuïtat, decisió que van adoptar de manera urgent i sense el temps necessari per a adquirir coneixement del mercat exterior i dels riscos que comporta l'activitat internacional. Esta situació es va vore agreujada en el cas de les Pimes, que per la seua naturalesa disposen de menys recursos i capacitats per a afrontar una internacionalització amb garanties. Amb el disseny d'un model de maduresa d'internacionalització el treball de recerca pretén oferir una guia a les empreses consultores d'enginyeria que iniciaran o han iniciat un procés d'internacionalització. El disseny del model està basat en: (1) el coneixement teòric de les variables que afecten l'èxit internacional en el sector de la construcció, validades mitjançant entrevistes a deu empreses consultores d'enginyeria internacionalitzades; (2) els aspectes que intervenen en l'expansió internacional de les empreses; i (3) els models de maduresa més rellevants. El disseny del model es realitza seguint la propòsta del Design Science Research (DSR), en el qual se sotmet a iteracions de disseny i validació que incrementen la seua aplicabilitat. En estes iteracions s'apliquen diferents tècniques d'investigació: grup focal, prova pilot i estudi de casos múltiple; mitjançant estos estudis de cas, s'aplica el model a huit empreses consultores d'enginyeria. Estes implementacions han permés identificar les fortaleses i febleses de les empreses, el seu nivell de maduresa d'internacionalització i la influència de la grandària i experiència internacional de les empreses en el seu nivell de maduresa i en el valor dels índexs d'internacionalització. / [EN] The Spanish economic crisis began in 2007 and it produced a significant reduction in demand that affected Spanish engineering companies seriously. Many of them started an internationalization process to ensure their continuity, but this decision was adopted in a hurry and without enough time to acquire knowledge of the foreign market and the risks that international activity entailed. This situation was aggravated in the case of SMEs, which have fewer resources and capacities to face internationalization with guarantees. With the design of an internationalization maturity model, this research aims to offer a guide to engineering companies that are going to start or have started an internationalization process. The design of the model is based on: (1) the theoretical knowledge of the variables that affect international success in the construction sector, validated through interviews with ten internationalized engineering companies; (2) the factors involved in the international expansion of the companies; and (3) the most relevant maturity models. The design of the model is carried out following the Design Science Research (DSR) approach, in which the model is subjected to design and validation iterations that increase its applicability. In these iterations several research techniques are applied: focus group, pilot test and multiple case study; through these case studies the model is applied to eight engineering companies. These implementations have made it possible to identify the strengths and weaknesses of the companies, their level of internationalization maturity and the influence of the size and international experience of the companies on their level of maturity and on the value of the internationalization indices. / Lozano Torró, A. (2022). Modelo de madurez de internacionalización de las empresas consultoras de ingeniería españolas [Tesis doctoral]. Universitat Politècnica de València. https://doi.org/10.4995/Thesis/10251/183870 / TESIS

Smart technology, such as the internet of things, artificial intelligence, and big data, provides consumers with a new level of convenience through various smart-connected products (SCPs). Although many experts have increasingly warned about the privacy vulnerability issues of various SCPs, consumers often underestimate privacy risks when adopting smart technology. Accordingly, this dissertation presents a literature review and three empirical studies that examine the privacy problems and suggest new concepts and models for a deeper understanding of the privacy suspension phenomenon. The first chapter reviews the literature related to the privacy suspension phenomenon by integrating the antecedents of consumers' privacy concerns. New concepts of privacy concerns, such as active and inactive privacy concerns, are suggested along with multiple propositions for the proposed privacy suspension theory, which extends the dimension of ambivalence toward trust and distrust regarding smart technology. The second chapter presents the proposed privacy–common good trade-off model and three assumptions related to privacy trade- offs, privacy reduction, and anchoring effects in the sustainable smart-connected car context. This study also discusses the relationships between governments, companies, and consumers regarding the effects of the common good of sustainability and government subsidies. The third chapter evaluates the mediation effects between sustainability, trust, privacy concerns, disclosure intentions, and purchase intentions when purchasing sustainable smart-connected cars based on the proposed sustainability–trust–behavior model. Finally, the fourth chapter provides a practical solution to resolve privacy suspension issues using the design science research approach. This study proposes privacy information type characteristics to evaluate SCPs' tailored data collection capabilities, visualizing them through a spider diagram design method with nudges. / Doctor of Philosophy / This dissertation discusses the consumer privacy suspension phenomenon when adopting smart technology. The first chapter summarizes existing studies regarding privacy concerns, trust, distrust, and ambivalence in adopting technology. It also proposes new concepts of privacy concerns and outlines the unique relationship between consumer privacy concerns and ambivalence toward trust and distrust in smart-connected products, thus helping readers understand why consumers reduce privacy concerns when adopting smart technology. The second chapter presents an empirical study that examines how consumers trade their privacy for the common good of sustainability based on the proposed privacy–common good trade-off model and outlines three key assumptions in the sustainable smart-connected car context. The third chapter discusses the roles of sustainability and trust when consumers decide to disclose their personal information and purchase sustainable smart-connected cars based on the proposed sustainability–trust–behavior model. Last, the fourth chapter provides a practical solution to improve the current inefficient privacy notification systems that cannot apply to different smart-connected products due to various smart sensors collecting different types of personal information. Thus, this dissertation contributes to a deeper understanding of the consumer privacy suspension phenomenon and how sustainability benefits can mitigate the conflicting interests between governments, companies, and consumers when adopting smart technology. In addition, the suggested practical solution using the design science research approach can help consumers make better privacy decisions when purchasing smart-connected products.

Dagens allt mer komplexa utvecklingsmiljöer gör att det blir viktigare att användaren hartillgång till rätt information vid rätt tillfälle. Ett stort problem med dagens utvecklingsmiljöersom används vid utveckling av ärendehanteringssystem är att de ej är integrerade vilket medföratt användaren måste flytta information mellan system manuellt. Den här studien undersöker hur en integrerad utvecklingsmiljö kan designas för att minskamängden information som användaren måste hålla i minnet och där med främjaanvändarupplevelsen. Studien följer metoden design science research methodology. Enförstudie genomförs för att få en tydlig problembild och med resultatet som grund sätts mål uppför en lösning. Arbetet går igenom tre iterationer för att slutligen finna nio designprinciper. Slutsatsen av studien är de nio identifierade designprinciperna. Tre av principerna anses kunnaappliceras i alla typer av system. De andra sex principerna anses endast vara applicerbara ikontexten av en integrerad utvecklingsmiljö. Designprinciperna främjar användarupplevelsengenom att minska mängden information som användaren manuellt behöver hantera.

Studien diskuterar hur spelifierad reklam, ett så kallat advergame som kombinerar spel ochreklam, kan påverka användarnas engagemang på en plattform såsom Youtube. En prototypskapades med målet att illustrera hur spelifierad reklam på en videoplattform kan se ut. Studiensavsikt är att få en förståelse för hur användarnas attityd till reklam påverkar och influerar derasengagemang till att interagera med ett advergame på en videoplattform. Vidare är studiens syfteatt utvärdera vilka spelelement som påverkar användares engagemang i ett advergame. Studienanvände sig av kvalitativa metoder samt prototyputveckling. Prototypen utvecklades under tvåiterationer och det genomfördes även fyra användbarhetstester för att förbättra prototypen.Därefter testades prototypen i en fokusgrupp och i tre par-intervjuer. Intervjuerna genomfördespå plats i två städer i sydvästra Skåne. Resultatet bidrog med insikter om hur personerinteragerar med digital reklam och deras tankar kring ett advergame. Responsen frånintervjuerna indikerade att det inte är lämpligt att använda advergames på en videoplattform pågrund av att det stör användarens intention till varför de är på Youtube. Vidare dras slutsatsenatt spelelement som ledartavla, poäng och medaljer främjar engagemang och uppmuntraranvändaren till att interagera med ett advergame. För att få ett tydligare resultat hade det krävtsytterligare prototyputveckling samt tester och intervjuer. / The study discusses how gamified ads, a so-called advergame that combines game andadvertising, can affect user engagement on a platform like Youtube. A prototype was createdwith the aim of illustrating how gamified advertising on a video platform can be portrayed. Thepurpose of the study is to gain a better understanding regarding users' attitude towardsadvertising and how it influences their engagement to interact with an advergame on a videoplatform. Further, the intention of the study is to evaluate which game elements affect users’engagement on an advergame. The study consisted of qualitative methods and prototypedevelopment. The prototype was developed over two iterations and four usability tests were alsoconducted to improve the prototype. The prototype was then tested in a focus group and in threeinterviews made up of pairs. The interviews were held on site in two cities in southwest Skåne.The result contributed insights into how people interact with digital advertising and theirthoughts about an advergame. The response from the interviews indicated that it is notappropriate to use advergames on a video platform because it interferes with the user's intentionas to why they are on Youtube. Furthermore, it is concluded that game elements such asleaderboards, points and medals promote engagement and encourage the users to interact withan advergame. To get a clearer result, further prototype development as well as tests andinterviews are required.

The development of Digital Twin Technology, with a focus on addressing environmental concerns, has elevated the priority of Industry 4.0-based solutions. The study aimed to design a simulation model to optimize the electricity consumption of the electric bus fleet at Arlanda Airport as a subproject of the main Digital Twin project. The study found that there was no current model designed to simulate electricity consumption by formal methods, Z notation.  The research is guided by four primary objectives find power management strategies for e-buses, identify critical parameters affecting their energy consumption, create a Z Notation simulation model, and assess this model. Through a thorough review of the literature and methodical application, power management strategies were defined, and significant energy consumption parameters were identified. The model's usefulness in modelling and optimizing electricity usage was demonstrated by its careful construction using Z Notation and evaluation with Spivey's Fuzz Checker. The paper demonstrates the use of Design Science Research in creating a digital twin-based simulation, which has important implications for transportation systems as well as theoretical advances in simulation methodologies. Throughout the developed Z notations, it provide a proper insight into operational efficiency and sustainability in energy consumption.  The study also emphasizes the drawbacks of using Z Notation, such as its steep learning curve and limited community assistance. To improve the accuracy of electricity consumption forecasts, future research should use predictive analytics and fine-tune the model granularity. The thesis demonstrates how design science can be applied for preparing specification of services but not only in software development. This work lays the groundwork for more extensive applications in digital twin technologies and energy optimization, in addition to contributing to our understanding of e-bus power management at Arlanda Airport.